Analysis
-
max time kernel
140s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
11/08/2024, 07:11
General
-
Target
$TEMP/license.rtf
-
Size
177KB
-
MD5
5432da9674a9318f09b4634df0a87cc5
-
SHA1
48e1f56723dcfaf0843ae2920bfacf0b1bc95c35
-
SHA256
4dbd50a2e62856a3cad754ec390e386c131e8541b72999af4b06b0d67c252e32
-
SHA512
9463e90d895bb711e91e769dabfacf55062174858f63c6d4823534d94255c99e39f886f087a0f265ab346edc46170e3ced353ca58478dab3bb2eaed3c53b64f1
-
SSDEEP
384:mt0DxtpjQGrpI7xTp5Xe2IOffdqENCw6OI/u2hb3enh+iXZG8voVcUGAyiQE5Cdg:L5t9WIqyD8RG8A29YYw/eNUtJj
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 3 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 3 IoCs
-
Suspicious behavior: AddClipboardFormatListener 2 IoCs
-
Suspicious use of SetWindowsHookEx 8 IoCs
Processes
-
C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE"C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\AppData\Local\Temp\$TEMP\license.rtf" /o ""1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
245KB
MD5f883b260a8d67082ea895c14bf56dd56
SHA17954565c1f243d46ad3b1e2f1baf3281451fc14b
SHA256ef4835db41a485b56c2ef0ff7094bc2350460573a686182bc45fd6613480e353
SHA512d95924a499f32d9b4d9a7d298502181f9e9048c21dbe0496fa3c3279b263d6f7d594b859111a99b1a53bd248ee69b867d7b1768c42e1e40934e0b990f0ce051e
-
Filesize
16B
MD5d29962abc88624befc0135579ae485ec
SHA1e40a6458296ec6a2427bcb280572d023a9862b31
SHA256a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
SHA5124311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f
-
Filesize
1KB
MD5aace169634584714732743fda65909e2
SHA15b5f15b709ae2471336e4daa00e72e0e489aeacf
SHA256d369f4aab5fbf7139e06433bb9c7214f8c7b4beb3a99353b26cb4559fbef6404
SHA512c6a36946bdad5a4663a45cb1609066c1f9ce80c3ec185f10e80245994174d4b7c8bb3fa352947cec8be473d27a0358bbfaaf1e4d88fee173d9bf1c58c4e23358
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
2.0MB